$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/996fdef2-0e18-371e-acd0-550347f88ec9.roa File: 996fdef2-0e18-371e-acd0-550347f88ec9.roa (raw, json) Hash identifier: stfAASQAPsntKTgx2Ocn7trxc1DtQQUK6/BjvXnv7Bw= Subject key identifier: 00:80:4C:D8:C7:EF:2F:03:A8:5A:A3:95:83:B9:72:81:F7:BA:78:DD Certificate issuer: /CN=89ee541c-de14-47cf-b4d0-081e933fb330 Certificate serial: 010D0C9F432858493ED3D1A3D9ED84F55BD56200 Authority key identifier: E5:CE:97:53:78:E4:8B:6A:54:42:7E:4C:4B:8F:D7:26:F5:4B:E7:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/996fdef2-0e18-371e-acd0-550347f88ec9.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 53809 IP address blocks: 64.111.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d1:a3:d9:ed:84:f5:5b:d5:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ee541c-de14-47cf-b4d0-081e933fb330 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=2a2d2d07-cbf3-44a9-b7ff-4f376519126c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5a:fa:de:59:cd:84:43:06:f0:77:67:dc:ef: da:f1:90:55:ef:89:e8:81:dc:bb:c8:7f:60:9b:70: 55:66:b4:d0:5b:c6:83:d2:c9:d7:16:a7:6a:50:7b: 71:48:56:28:46:64:69:50:d6:25:c5:6c:30:ef:36: a9:2f:66:90:07:3e:bc:1f:29:5e:02:a0:3d:5f:3e: 1c:c9:b4:68:34:81:57:60:96:07:7c:4a:c2:e2:66: fa:2f:8e:24:e2:03:a2:82:c8:6c:dd:8c:78:af:48: ce:c8:59:07:70:41:b6:5e:f3:73:13:7d:66:22:51: 89:52:6a:1e:83:42:ba:d3:51:50:c2:e4:97:8e:f9: 78:07:a9:64:96:e7:97:bc:19:63:9d:d6:60:bf:f5: ec:c0:ca:9c:5f:c0:74:0b:6d:40:cd:35:87:68:58: 3b:74:4a:54:6a:33:bd:4a:ae:56:d7:eb:be:0a:cf: 98:af:8c:7a:c7:08:be:4a:30:3e:3e:17:37:38:95: 84:67:b3:5e:9e:64:fc:99:13:1c:4a:64:83:d2:64: b4:fb:c7:ee:85:1f:11:df:23:1f:19:57:9c:68:33: 4d:5d:fc:56:c5:25:90:3b:0d:aa:e2:ec:98:05:c4: d9:ac:f3:ef:06:9f:90:1e:67:7c:d0:c8:a5:02:13: 87:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:80:4C:D8:C7:EF:2F:03:A8:5A:A3:95:83:B9:72:81:F7:BA:78:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/996fdef2-0e18-371e-acd0-550347f88ec9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.crl X509v3 Authority Key Identifier: keyid:E5:CE:97:53:78:E4:8B:6A:54:42:7E:4C:4B:8F:D7:26:F5:4B:E7:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer sbgp-ipAddrBlock: critical IPv4: 64.111.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e3:76:f3:ff:f2:ee:91:cd:bd:0e:62:72:43:2f:06:87:9f: 9a:d6:53:c4:c1:64:21:19:78:6f:02:86:f9:c0:d0:cd:d9:5b: 5a:88:77:64:67:4f:72:2e:de:ba:0c:b5:a5:f8:13:4c:6d:6e: ab:8b:c6:9c:0a:80:94:3a:00:c7:ca:86:bd:99:43:08:65:0d: 76:2f:1d:47:45:6d:e1:5c:23:7d:e7:4c:7d:df:ed:49:1b:c5: 91:70:4a:bd:f4:db:fc:4e:c6:17:59:53:99:19:a9:4b:b6:40: a0:ae:40:5c:86:9f:62:50:a5:d7:3e:82:5f:45:87:ee:bf:a6: 08:84:98:8d:d6:4f:4f:24:3d:61:a3:74:07:e2:14:b2:8e:02: 8f:87:58:ee:ae:2d:86:50:59:da:e5:57:df:04:d8:cb:3e:88: 4d:f3:33:20:0a:05:c9:ee:c1:a0:69:57:9f:be:89:72:1a:e5: af:ee:a9:c5:54:7f:45:ee:bc:2b:bb:bf:d5:49:04:cf:85:9f: e4:1c:9e:d2:07:23:15:75:ce:dd:d3:7d:6c:da:cf:cc:c7:9a: e7:ac:33:af:f6:af:35:bc:b8:19:f4:22:0e:cd:7a:4d:e1:a5: 32:24:53:d5:1c:6c:21:11:3f:7e:77:c8:3b:bb:e1:88:32:2e: c8:2f:a7:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09Gj2e2E9VvVYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZTU0MWMtZGUxNC00N2NmLWI0ZDAtMDgxZTkzM2Zi MzMwMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk MmEyZDJkMDctY2JmMy00NGE5LWI3ZmYtNGYzNzY1MTkxMjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Fr63lnNhEMG8Hdn3O/a8ZBV74nogdy7yH9g m3BVZrTQW8aD0snXFqdqUHtxSFYoRmRpUNYlxWww7zapL2aQBz68HyleAqA9Xz4c ybRoNIFXYJYHfErC4mb6L44k4gOigshs3Yx4r0jOyFkHcEG2XvNzE31mIlGJUmoe g0K601FQwuSXjvl4B6lklueXvBljndZgv/XswMqcX8B0C21AzTWHaFg7dEpUajO9 Sq5W1+u+Cs+Yr4x6xwi+SjA+Phc3OJWEZ7NenmT8mRMcSmSD0mS0+8fuhR8R3yMf GVecaDNNXfxWxSWQOw2q4uyYBcTZrPPvBp+QHmd80MilAhOH2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACATNjH7y8DqFqjlYO5coH3unjdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84OWVl NTQxYy1kZTE0LTQ3Y2YtYjRkMC0wODFlOTMzZmIzMzAvOTk2ZmRlZjItMGUxOC0z NzFlLWFjZDAtNTUwMzQ3Zjg4ZWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODllZTU0MWMtZGUxNC00N2NmLWI0 ZDAtMDgxZTkzM2ZiMzMwLzg5ZWU1NDFjLWRlMTQtNDdjZi1iNGQwLTA4MWU5MzNm YjMzMC5jcmwwHwYDVR0jBBgwFoAU5c6XU3jki2pUQn5MS4/XJvVL58swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84OWVlNTQxYy1kZTE0LTQ3Y2YtYjRkMC0wODFl OTMzZmIzMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQG8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfjdvP/8u6Rzb0OYnJDLwaHn5rWU8TBZCEZeG8ChvnA0M3ZW1qId2Rn T3Iu3roMtaX4E0xtbquLxpwKgJQ6AMfKhr2ZQwhlDXYvHUdFbeFcI33nTH3f7Ukb xZFwSr302/xOxhdZU5kZqUu2QKCuQFyGn2JQpdc+gl9Fh+6/pgiEmI3WT08kPWGj dAfiFLKOAo+HWO6uLYZQWdrlV98E2Ms+iE3zMyAKBcnuwaBpV5++iXIa5a/uqcVU f0XuvCu7v9VJBM+Fn+QcntIHIxV1zt3TfWzaz8zHmuesM6/2rzW8uBn0Ig7Nek3h pTIkU9UcbCERP353yDu74YgyLsgvp1Q= -----END CERTIFICATE-----Generated at Wed May 7 12:03:20 2025 by rpki-client